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Full text available:^ pdfd .99 MB) 



We consider the privacy of personal information on the World Wide Web, emphasizing a 
concept of privacy as an aspect of social relationships between individuals. We make 
three contributions to understanding the right to privacy on the Web: (1) we highlight the 
role of informed consent as an important consideration for privacy, (2) we identify 
conditions under which the collection and centralization of personal information can be 
ethically justified, and (3) we offer an interpretation of a "reaso ... 
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Nick Feamster 

January 2004 ACM SIGCOMM Computer Communication Review, volume 34 issue l 
Publisher: ACM Press 

Full text available: ^| pdf(1 56.78 KB) Additional Information: full citation , abstract , references , citings 

Protocol and system designers use verification techniques to analyze a system's 
correctness properties. Network operators need verification techniques to ensure the 
"correct" operation of BGP. BGP's distributed dependencies cause small configuration 
mistakes or oversights to spur complex errors, which sometimes have devastating effects 
on global connectivity. These errors are often difficult to debug because they are 
sometimes only exposed by a specific message arrival pattern or failure scenari ... 
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Ratul Mahajan, David Wetherall, Tom Anderson 

August 2002 ACM SIGCOMM Computer Communication Review , Proceedings of the 
2002 conference on Applications, technologies, architectures, and 
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terms 

It is well-known that simple, accidental BGP configuration errors can disrupt Internet 
connectivity. Yet little is known about the frequency of misconfiguration or its causes, 
except for the few spectacular incidents of widespread outages. In this paper, we present 
the first quantitative study of BGP misconfiguration. Over a three week period, we 
analyzed routing table advertisements from 23 vantage points across the Internet 
backbone to detect incidents of misconfiguration. For each incident we ... 

4 O ptimising channel assi g nments for p rivate mobile rad i o n e tworksTn the UHF 2 band I I 
Roger M. Whitaker, Steve Hurley, Stuart M. Allen 
November 2002 Wireless Networks, volume 8 issue 6 
Publisher: Kluwer Academic Publishers 

Full text available: Q pdf(1 57.27 KB ) Additional Information: f ull cita tio n , abstract, references , index terms 

Private mobile radio (PMR) services are widely used in business and emergency 
applications. Typically, these services use the UHF 2 band (450-470 MHz). In order to 
comply with continental practice, the provision of these services in the UK is to be 
realigned and a new operational assignment will be generated in 2005. However, this can 
only be achieved with an appropriate model and the ability to make assignments for large 
regional networks. The purpose of this paper is to bring our experiences o ... 
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Wen Xu, Jennifer Rexford 

August 2006 ACM SIGCOMM Computer Communication Review , Proceedings of the 
2006 conference on Applications, technologies, architectures, and 
protocols for computer communications SIGCOMM '06, volume 36 issue 4 
Publisher: ACM Press 

Full text available: ^] pdf(236.32 KB ) Additional Information: full citation , abstract , references , index terms 

The Internet consists of thousands of independent domains with different, and sometimes 
competing, business interests. However, the current interdomain routing protocol (BGP) 
limits each router to using a single route for each destination prefix, which may not satisfy 
the diverse requirements of end users. Recent proposals for source routing offer an 
alternative where end hosts or edge routers select the end-to-end paths. However, source 
routing leaves transit domains with very little control an ... 

Keywords: BGP, flexibility, inter-domain routing, multipath routing, scalability 
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June 2007 Proceedings of the 2007 inaugural international conference on Distributed 
event-based systems DEBS '07 

Publisher: ACM Press 

Full text available: ^| pdf(1.51 MB) Additional Information: full citation , abstract , references , index terms 

Publish/subscribe (pub/sub) middleware platforms for event-based distributed systems 
often provide many configurable policies that affect end-to-end quality of service (QoS). 
Although the flexibility and functionality of pub/sub middleware platforms has matured, 
configuring their QoS policies in semantically compatible ways has become more complex. 
This paper makes two contributions to reducing the complexity of configuring QoS policies 
for event-based distributed systems. First, It evaluates ... 
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Secure Embedded Processing through Hard ware- Assisted Run-Time Monitoring I | ; 
Divya Arora, Srivaths Ravi, Anand Raghunathan, Niraj K. Jha 

March 2005 Proceedings of the conference on Design, Automation and Test in Europe 
- Volume 1 DATE '05 

Publisher: IEEE Computer Society 

Full text available: ^| pdf( 222.67 KB) Additional Information: ful l ci t ation , abstract, citings, index terms 

Security is emerging as an important concern in embedded system design. The security of 
embedded systems is often compromised due to vulnerabilities in "trusted" software that 
they execute. Security attacks exploit these vulnerabilities to trigger unintended program 
behavior, such as the leakage of sensitive data or the execution of malicious code. In this 
work, we present a hardware-assisted paradigm to enhance embedded system security by 
detecting and preventing unintended program behavior. Sp ... 

8 Wireless LANs: A-DRAFT: an adaptive QoS mechanism to su p port absolute and | | 
<gl> relative throu gh put in 802.1 1 wireless LANs 

^ Wasan Pattara-Atikom, Sujata Banerjee, Prashant Krishnamurthy 

October 2004 Proceedings of the 7th ACM international symposium on Modeling, 
analysis and simulation of wireless and mobile systems MSWiM '04 
Publisher: ACM Press 

Full text available: ^gpdf( 304.69 KB ) Additional Information: full citation , abstract , references , index terms 

Several distributed QoS mechanisms have been proposed to augment the existing 
distributed coordination function of the IEEE 802.11 MAC protocol to provide QoS support 
for QoS-sensitive applications. These mechanisms use well-known QoS enabling 
techniques such as priority assignment and fair scheduling within existing 802.11 MAC 
parameters. Although these mechanisms provide differentiated throughput for different 
classes of traffic, they cannot provide both relative and absolute throughput suppor ... 

Keywords: quality of service, throughput, wireless LANs 

9 Verifying protocols by model checkin g : a case study of the wireless a p plication I I 
protocol and the model checker SPIN 

Yu-Tong He, Ryszard Janicki 

October 2004 Proceedings of the 2004 conference of the Centre for Advanced Studies 
on Collaborative research CASCON '04 

Publisher: IBM Press 

Full text available- IS pdf (326 99 KB) Add ' tiona ' Information: fu ll cita ti on , a bs tr act, references , index terms . 

review 

This paper deals with a formal verification of protocols, where the model checking 
approach is applied. As a case example, the Wireless Application Protocol (WAP Version 
2.0) and the SPIN model checker are used. The paper concentrates on the Transaction 
Layer, in which some defects have been uncovered and proper corrections have been 
proposed. 
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Access control policy management: Composing and combining policies under the 
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David F. Ferraiolo, Serban Gavrila, Vincent Hu, D. Richard Kuhn 

June 2005 Proceedings of the tenth ACM symposium on Access control models and 
technologies SACMAT '05 

Publisher: ACM Press 

Full text available: -g| pdf(323.1Q KB) Additional Information: full citation , abstract, references , index terms 

As a major component of any host, or network operating system, access control 
mechanisms come in a wide variety of forms, each with their individual attributes, 
functions, methods for configuring policy, and a tight coupling to a class of policies. To 
afford generalized protection, NIST has initiated a project in pursuit of a standardized 
access control mechanism, referred to as the Policy Machine (PM) that requires changes 
only in its configuration in the enforcement of arbitrary and organizati ... 

Keywords: access control, multi-level security, role based access control, separation of 
duty 



11 Self-aware mana g ement of IP networks with QoS g uarantees I I 
Francine Krief 

September 2004 International Journal of Network Management volume 14 issue 5 
Publisher: John Wiley & Sons, Inc. 

Full text available: pdf(204.98 KB) Additional Information: full citation , abstract , references , index terms 

Self-aware management allows the network to react and to adapt to changes of situation. 
In this paper an architecture is described for self-aware management of IP networks 
offering QoS guarantees. This architecture uses policy-based management and multi- 
agent systems. The originality of the present approach lies in the intention to give a real 
autonomy to the components intervening in the chain of services in terms of internal 
decisions and configuration. Our solution allows the self-configurati ... 

12 Papers from Hotnets-ll: The cuttin g EDGE of IP router confi g uration I I 
^ Don Caldwell, Anna Gilbert, Joel Gottlieb, Albert Greenberg, Gisli Hjalmtysson, Jennifer 

Rexford 

January 2004 ACM SIGCOMM Computer Communication Review, volume 34 issue l 
Publisher: ACM Press 

Full text available: ^g]pdf( 199.41 KB ) Additional Information: f ull citation , abst ra ct, r eferences , citings 

Human error in configuring routers undermines attempts to provide reliable, predictable 
end-to-end performance on IP networks. Manual configuration, while expensive and error- 
prone, is the dominant mode of operation, especially for large enterprise networks. These 
networks often lack the basic building blocks— an accurate equipment inventory, a 
debugged initial configuration, and a specification of local configuration policies— to 
support the holy grail of automation. We argue the migrating ... 

13 Development of a timin g analysis program for multiple clocked network I I 
Edward Chan 

June 1985 Proceedings of the 22nd ACM/IEEE conference on Design automation DAC 
'85 

Publisher: ACM Press 

Full text available* -f 51 ) pdf(379 37 KB) Add 'tional Information: full citation , abstract , references , citings, index 
• [aj ■ terms 

This paper describes the development of a timing analysis program for logic networks 
using both critical path and enumerative trace methods. The program utilizes the dynamic 
data structure of Pascal and its recursive computing power such that depth first search 
and breath first search can be carried out for delay calculations in a highly efficient 
manner. The program detects long and short paths between storage elements, setup and 
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hold time violations of flip-flop, and minimum pulse width v ... 

14 Adaptive inte g ration of third-party web services I I 
Giovanni Denaro, Mauro Pezze, Davide Tosi 

May 2005 ACM SIGSOFT Software Engineering Notes , Proceedings of the 2005 
workshop on Design and evolution of autonomic application software 
DEAS '05, Volume 30 Issue 4 
Publisher: ACM Press 

Full text available: ^] pdf(392.06 KB) Additional Information: full citation , abstract , references , index terms 

Service based computing allows clients to dynamically bind services, and providers to 
modify the service implementation independently from their clients. The impossibility of 
statically determining which service implementation will be bound at runtime may lead to 
unexpected client-side failures. This position paper suggests a scenario in which service- 
based applications autonomously react to changes in the implementation of the used 
services, automatically detect possible integration mismatches, ... 

Keywords: integration faults, self-adaptive service oriented architecture, web services 

15 Secure o perating s ystems: A lo g ical specification and analysis for SELinux MLS [J 
policy 

^ Boniface Hicks, Sandra Rueda, Luke St.Clair, Trent Jaeger, Patrick McDaniel 

June 2007 Proceedings of the 12th ACM symposium on Access control models and 

technologies SACMAT '07 
Publisher: ACM Press 

Full text available: pdf(250.88 KB) Additional Information: full citation , abstract , references , index terms 

The SELinux mandatory access control (MAC) policy has recently added a multi-level 
security (MLS) model which is able to express a fine granularity of control over a subject's 
access rights. The problem is that the richness of this policy makes it impractical to verify, 
by hand, that a given policy has certain important information flow properties or is 
compliant with another policy. To address this, we have modeled the SELinux MLS policy 
using a logical specification and implemented that spe ... 

Keywords: SELinux, multi-level security, policy analysis, policy compliance 



Results 1 - 15 of 15 

The ACM Portal is published by the Association for Computing Machinery. Copyright © 2007 ACM, Inc. 
Terms of Usa ge Privacy Polic y Co de of Et hics Contact Us 

Useful downloads: Adobe Acrobat Q QuickTime \M Windows Me d ia Pl ayer ^> Real Play er 



http://portal.acm.org/results.cfm?coll=ACM&dl=ACM&CFID=22985209&CFTOKEN=94... 7/3/2007 



